Network access credential migration

ABSTRACT

A method for network access credential migration is provided. The method can include deprovisioning a network access credential for a wireless network from a first wireless communication device. The method can further include determining that the network access credential has been successfully deprovisioned from the first wireless communication device. The method can additionally include provisioning the network access credential to the second wireless communication device after the network access credential has been successfully deprovisioned from the first wireless communication device.

FIELD OF THE DESCRIBED EMBODIMENTS

The described embodiments relate generally to wireless communicationsand more particularly to network access credential migration.

BACKGROUND

Cellular network subscribers often upgrade their wireless communicationdevices. When a cellular network subscriber upgrades his or her wirelesscommunication device, a network access credential associated with thesubscriber's account can be provisioned to the subscriber's new wirelesscommunication device. In many instances, a copy of the network accesscredential that is provisioned to the subscriber's new device can remainon the old device. When a device is provisioned with a network accesscredential, it can attempt to connect to a cellular network using thenetwork access credential. As such, if a subscriber's old device ispowered on, it can attempt to connect to the cellular network using anetwork access credential associated with the subscriber's account, eventhough the subscriber's new device can be connected to the cellularnetwork using the same network access credential. In such situations,collisions can result in which both the subscriber's old device and newdevice can respond to a page for an incoming communication, such as aphone call, text message, or the like. The first device to respond tothe page can receive the communication, even if it is the subscriber'sold device that first responds to the page. Accordingly, communicationscan be missed by a subscriber in such collision scenarios if he or sheexpects them to be received by his or her new device.

Many subscribers wish to continue to use their old devices for functionsother than connecting to the cellular network. For example, somesubscribers may use their old devices to connect to wireless local areanetworks (WLANs) to surf the Internet and check email, to play mobilegames, to take pictures, and/or perform other non-cellular functions ofwhich various wireless communication devices can be capable.Accordingly, subscribers who have upgraded their devices and wish tocontinue using their old devices can be plagued by collisions betweentheir old and new devices.

SUMMARY OF THE DESCRIBED EMBODIMENTS

Some embodiments disclosed herein provide for network access credentialmigration in a manner that avoids collisions between devices even if asubscriber continues to use his or her old device following migration ofthe subscriber's account to a new device. In this regard, some exampleembodiments provide for deprovisioning of a network access credentialfor a wireless network from a first wireless communication device beforethe network access credential is migrated to a second wirelesscommunication device. Deprovisioning of the network access credentialform the first wireless communication device in accordance with somesuch embodiments can render the network access credential unreadable bythe first wireless communication device. Accordingly, the first wirelesscommunication device may not use the network access credential toattempt to connect to the wireless network, even if it is powered on andwithin range of the wireless network, and collisions between the firstwireless communication device and the second wireless communicationdevice can be avoided.

In a first embodiment, a method is provided. The method of the firstembodiment can include deprovisioning a network access credential for awireless network from a first wireless communication device; determiningthat the network access credential has been successfully deprovisionedfrom the first wireless communication device; and provisioning thenetwork access credential to a second wireless communication deviceafter the network access credential has been successfully deprovisionedfrom the first wireless communication device so that the network accesscredential is migrated from the first wireless communication device tothe second wireless communication device.

In a second embodiment, an apparatus comprising processing circuitry isprovided. The processing circuitry can be configured to control theapparatus of the second embodiment to deprovision a network accesscredential for a wireless network from a first wireless communicationdevice; determine that the network access credential has beensuccessfully deprovisioned from the first wireless communication device;and provision the network access credential to a second wirelesscommunication device after the network access credential has beensuccessfully deprovisioned from the first wireless communication deviceso that the network access credential is migrated from the firstwireless communication device to the second wireless communicationdevice.

In a third embodiment, a computer program product is provided. Thecomputer program product of the third embodiment can include at leastone non-transitory computer readable storage medium having program codestored thereon. The program code can include program code fordeprovisioning a network access credential for a wireless network from afirst wireless communication device; program code for determining thatthe network access credential has been successfully deprovisioned fromthe first wireless communication device; and program code forprovisioning the network access credential to a second wirelesscommunication device after the network access credential has beensuccessfully deprovisioned from the first wireless communication deviceso that the network access credential is migrated from the firstwireless communication device to the second wireless communicationdevice.

In a fourth embodiment, an apparatus is provided that can include meansfor deprovisioning a network access credential for a wireless networkfrom a first wireless communication device; means for determining thatthe network access credential has been successfully deprovisioned fromthe first wireless communication device; and means for provisioning thenetwork access credential to a second wireless communication deviceafter the network access credential has been successfully deprovisionedfrom the first wireless communication device so that the network accesscredential is migrated from the first wireless communication device tothe second wireless communication device.

In a fifth embodiment, a method is provided. The method of the fifthembodiment can include receiving, at a first wireless communicationdevice, a deprovisioning command sent by a provisioning entity. Anetwork access credential for a wireless network that is to be migratedfrom the first wireless communication device to a second wirelesscommunication device can be deprovisioned from the first wirelesscommunication device based at least in part on the deprovisioningcommand. The method of the fifth embodiment can further includereceiving a predefined credential provisioned to the first wirelesscommunication device by the provisioning entity after the network accesscredential has been deprovisioned from the wireless communicationdevice; recognizing the predefined credential; and, in response to thepredefined credential, barring connection to the wireless network.

In a sixth embodiment, a wireless communication device is provided. Thewireless communication device of the sixth embodiment can include atransceiver and processing circuitry coupled to the transceiver. Thetransceiver can be configured to transmit data to and receive data froma wireless network. The processing circuitry can be configured tocontrol the wireless communication device to at least receive adeprovisioning command sent by a provisioning entity. A network accesscredential for the wireless network that is to be migrated from thewireless communication device to a second wireless communication devicecan be deprovisioned from the wireless communication device based atleast in part on the deprovisioning command. The processing circuitrycan be further configured to control the wireless communication deviceto receive a predefined credential provisioned to the wirelesscommunication device by the provisioning entity after the network accesscredential has been deprovisioned from the wireless communicationdevice; recognize the predefined credential; and in response to thepredefined credential, bar connection to the wireless network.

In a seventh embodiment, a computer program product is provided. Thecomputer program product of the seventh embodiment can include at leastone non-transitory computer readable storage medium having program codestored thereon. The program code can include program code for receiving,at a first wireless communication device, a deprovisioning command sentby a provisioning entity. A network access credential for a wirelessnetwork that is to be migrated from the first wireless communicationdevice to a second wireless communication device can be deprovisionedfrom the first wireless communication device based at least in part onthe deprovisioning command. The program code can further include programcode for receiving a predefined credential provisioned to the firstwireless communication device by the provisioning entity after thenetwork access credential has been deprovisioned from the wirelesscommunication device; program code for recognizing the predefinedcredential; and program code for, in response to the predefinedcredential, barring connection to the wireless network.

In an eighth embodiment, an apparatus is provided that can include meansfor receiving, at a first wireless communication device, adeprovisioning command sent by a provisioning entity. A network accesscredential for a wireless network that is to be migrated from the firstwireless communication device to a second wireless communication devicecan be deprovisioned from the first wireless communication device basedat least in part on the deprovisioning command. The apparatus of theeighth embodiment can further include means for receiving a predefinedcredential provisioned to the first wireless communication device by theprovisioning entity after the network access credential has beendeprovisioned from the wireless communication device; means forrecognizing the predefined credential; and means for, in response to thepredefined credential, barring connection to the wireless network.

The above summary is provided merely for purposes of summarizing someexample embodiments so as to provide a basic understanding of someaspects of the disclosure. Accordingly, it will be appreciated that theabove described example embodiments are merely examples and should notbe construed to narrow the scope or spirit of the disclosure in any way.Other embodiments, aspects, and advantages will become apparent from thefollowing detailed description taken in conjunction with theaccompanying drawings which illustrate, by way of example, theprinciples of the described embodiments.

BRIEF DESCRIPTION OF THE DRAWINGS

The described embodiments and the advantages thereof may best beunderstood by reference to the following description taken inconjunction with the accompanying drawings. These drawings are notnecessarily drawn to scale, and in no way limit any changes in form anddetail that may be made to the described embodiments by one skilled inthe art without departing from the spirit and scope of the describedembodiments.

FIG. 1 illustrates a system for network access credential migration inaccordance with some example embodiments.

FIG. 2 illustrates a block diagram of an apparatus that can beimplemented on a provisioning entity in accordance with some exampleembodiments.

FIG. 3 illustrates a block diagram of an apparatus that can beimplemented on a wireless communication device in accordance with someexample embodiments.

FIG. 4 illustrates a flowchart according to an example method fornetwork access credential migration according to some exampleembodiments.

FIG. 5 illustrates a flowchart according to another example method fornetwork access credential migration according to some exampleembodiments.

FIG. 6 illustrates a flowchart according to a further example method fornetwork access credential migration according to some exampleembodiments.

FIG. 7 illustrates a flowchart according to an example method forenabling continued use of a wireless communication device followingdeprovisioning of the wireless communication device according to someexample embodiments.

DETAILED DESCRIPTION OF SELECTED EMBODIMENTS

Representative applications of methods and apparatus according to thepresent application are described in this section. These examples arebeing provided solely to add context and aid in the understanding of thedescribed embodiments. It will thus be apparent to one skilled in theart that the described embodiments may be practiced without some or allof these specific details. In other instances, well known process stepshave not been described in detail in order to avoid unnecessarilyobscuring the described embodiments. Other applications are possible,such that the following examples should not be taken as limiting.

In the following detailed description, references are made to theaccompanying drawings, which form a part of the description and in whichare shown, by way of illustration, specific embodiments in accordancewith the described embodiments. Although these embodiments are describedin sufficient detail to enable one skilled in the art to practice thedescribed embodiments, it is understood that these examples are notlimiting; such that other embodiments may be used, and changes may bemade without departing from the spirit and scope of the describedembodiments.

Some embodiments disclosed herein provide for migration of a networkaccess credential for a wireless network from a first wirelesscommunication device to a second wireless communication device in amanner that prevents collisions. In this regard, the network accesscredential can be deprovisioned from the first wireless communicationdevice prior to being provisioned to the second wireless communicationdevice. Accordingly, even if a subscriber continues to use the firstwireless communication device after the network access credentialassociated with his or her account has been migrated to the secondwireless communication device, the first wireless communication devicewill not connect to the wireless network using the network accesscredential. Accordingly, collisions between the first wirelesscommunication device and the second wireless communication device can beavoided.

Further, in some example embodiments, the first wireless communicationdevice can be provisioned with a predefined credential as part of thenetwork access credential migration procedure. The first wirelesscommunication device of such example embodiments can be configured torecognize the predefined credential and can be configured to barconnection to the wireless network in response to being provisioned withthe predefined credential. As such, even if the subscriber continues touse the first wireless communication device for other purposes, both thefirst wireless communication device and the wireless network can avoidwasting resources and incurring overhead from processing registrationand connection attempts.

FIG. 1 illustrates a system 100 for network access credential migrationin accordance with some example embodiments. The system 100 can includea first wireless communication device 102 and second wirelesscommunication device 104. The wireless communication devices 102 and 104can each be a cellular phone, such as a smart phone device, a tabletcomputing device, a laptop computing device, or other computing deviceconfigured to operate within a wireless network, such as by way ofnon-limiting example a cellular network, for which a user can have anaccount and associated network access credential that can be provisionedto the user's device to enable the device to access the wirelessnetwork.

The first wireless communication device 102 can initially have a networkaccess credential that was provisioned to the first wirelesscommunication device to enable the first wireless communication deviceto access a wireless network. As will be described further herein below,the network access credential can be migrated to the second wirelesscommunication device 104 in accordance with one or more exampleembodiments. In this regard, a network user can request that his or heraccount be migrated from the first wireless communication device 102 tothe second wireless communication device 104, such as in a scenario inwhich the user may upgrade from the first wireless communication device102 to the second wireless communication device 104.

The network access credential can be any credential that can be uniquelyassociated with the user's wireless network account, and which canenable a device to access the wireless network. By way of non-limitingexample, the network access credential can include one or more of anInternational Mobile Subscriber Identity (IMSI), a Mobile SubscriptionIdentification Number (MSIN), a Mobile Identification Number (MIN), aMobile Directory Number (MDN), a network authentication key, aSubscriber Identity Module (SIM) application, or a Universal SubscriberIdentity Module (USIM) application.

The system 100 can further include a provisioning entity 106. Theprovisioning entity 106 can be any entity that can be configured tomanage provisioning of network access credentials for accessing awireless network. By way of non-limiting example, the provisioningentity 106 can be embodied as one or more of an Over-the-Air ServiceProvisioning (OTASP) entity, an Over-the-Air Parameter Administration(OTAPA) entity, an Over-the-Air (OTA) Subscriber Identity Module (SIM)provisioning entity, or the like. The provisioning entity 106 can beembodied as one or more computing devices. By way of non-limitingexample, the provisioning entity 106 can be embodied as one or moreservers, a distributed computing device, or the like. In some exampleembodiments, the provisioning entity 106 can be managed by a networkcarrier to facilitate provisioning and management of network accesscredentials for network users.

As will be described further herein below, the provisioning entity 106can be configured in some example embodiments to deprovision a networkaccess credential from the first wireless communication device 102 andto provision the network access credential to the second wirelesscommunication device 104 in order to facilitate migration of the networkaccess credential from the first wireless communication device 102 tothe second wireless communication device 104. In this regard, theprovisioning entity 106 can be configured to interface with the firstwireless communication device 102 and second wireless communicationdevice 104. For example, the provisioning entity 106 can be configuredto interface with the first wireless communication device 102 and/orsecond wireless communication device 104 via a network 108. The network108 can be embodied as one or more wireline networks, one or morewireless networks (e.g., one or more cellular networks, one or moreWLANs, one or more wireless metropolitan area networks, and/or thelike), or some combination thereof, and in some example embodiments, caninclude the Internet. In some example embodiments, the network 108 caninclude the wireless network for which the network access credential tobe migrated from the first wireless communication device 102 to thesecond wireless communication device 104 provides access.

Although illustrated in FIG. 1 as interfacing over the network 108, insome example embodiments, one or more of the first wirelesscommunication device 102 or the second wireless communication device 104can be configured to interface with the provisioning entity 106 via adirect connection. For example, a wired connection, such as a universalserial bus (USB) connection, FireWire connection, and/or the like can beused in some example embodiments to interface the provisioning entity106 with one or more of the first wireless communication device 102 orthe second wireless communication device 104. As another example, awireless location, such as a Bluetooth connection, ZigBee connection,wireless USB connection, or the like can be used to interface theprovisioning entity 106 with one or more of the first wirelesscommunication device 102 or the second wireless communication device 104in some example embodiments.

FIG. 2 illustrates a block diagram of an apparatus 200 that can beimplemented on the provisioning apparatus 106 in accordance with someexample embodiments. It will be appreciated that the components, devicesor elements illustrated in and described with respect to FIG. 2 belowmay not be mandatory and thus some may be omitted in certainembodiments. Additionally, some embodiments can include further ordifferent components, devices or elements beyond those illustrated inand described with respect to FIG. 2.

In some example embodiments, the provisioning apparatus 106 can includeprocessing circuitry 210 that is configurable to perform actions inaccordance with one or more example embodiments disclosed herein. Inthis regard, the processing circuitry 210 can be configured to performand/or control performance of one or more functionalities of theprovisioning apparatus 106 in accordance with various exampleembodiments, and thus can provide means for performing functionalitiesof the provisioning apparatus 106 in accordance with various exampleembodiments. The processing circuitry 210 can be configured to performdata processing, application execution and/or other processing andmanagement services according to one or more example embodiments.

In some embodiments, the provisioning apparatus 106 or a portion(s) orcomponent(s) thereof, such as the processing circuitry 210, can includeone or more chipsets, which can each include one or more chips. Theprocessing circuitry 210 and/or one or more further components of theprovisioning apparatus 106 can therefore, in some instances, beconfigured to implement an embodiment on a chipset.

In some example embodiments, the processing circuitry 210 can include aprocessor 212 and, in some embodiments, such as that illustrated in FIG.2, can further include memory 214. The processing circuitry 210 can bein communication with or otherwise control a communication interface 216and/or provisioning module 218.

The processor 212 can be embodied in a variety of forms. For example,the processor 212 can be embodied as various processing means such as amicroprocessor, a coprocessor, a controller or various other computingor processing devices including integrated circuits such as, forexample, an ASIC (application specific integrated circuit), an FPGA(field programmable gate array), some combination thereof, or the like.Although illustrated as a single processor, it will be appreciated thatthe processor 212 can comprise a plurality of processors. The pluralityof processors can be in operative communication with each other and canbe collectively configured to perform one or more functionalities of theprovisioning apparatus 106 as described herein. In embodiments includinga plurality of processors, the processors can be implemented on a singlecomputing device, or can be distributed across a plurality of computingdevices that can be collectively configured to provide functionality ofthe provisioning apparatus 106 in accordance with some exampleembodiments. In some example embodiments, the processor 212 can beconfigured to execute instructions that can be stored in the memory 214or that can be otherwise accessible to the processor 212. As such,whether configured by hardware or by a combination of hardware andsoftware, the processor 212 capable of performing operations accordingto various embodiments while configured accordingly.

In some example embodiments, the memory 214 can include one or morememory devices. In embodiments including multiple memory devices, thememory devices can be implemented on a single computing device, or canbe distributed across a plurality of computing devices that can becollectively configured to provide functionality of the provisioningapparatus 106 in accordance with some example embodiments. Memory 214can include fixed and/or removable memory devices. In some embodiments,the memory 214 can provide a non-transitory computer-readable storagemedium that can store computer program instructions that can be executedby the processor 212. In this regard, the memory 214 can be configuredto store information, data, applications, instructions and/or the likefor enabling the provisioning apparatus 106 to carry out variousfunctions in accordance with one or more example embodiments. In someembodiments, the memory 214 can be in communication with one or more ofthe processor 212, communication interface 216, or provisioning module218 via a bus(es) for passing information among components of theprovisioning apparatus 106.

The provisioning apparatus 106 can further include a communicationinterface 216. The communication interface 216 can enable theprovisioning apparatus 106 to communicate with the first wirelesscommunication device 102 and second wireless communication device 104.In this regard, the communication interface 216 can include one or moreinterface mechanisms for enabling communication with other devicesand/or networks. As such, the communication interface 216 can include,for example, an antenna (or multiple antennas) and supporting hardwareand/or software for enabling communications with a wirelesscommunication network (e.g., a cellular network, WLAN, and/or the like)and/or a communication modem or other hardware/software for supportingcommunication via cable, digital subscriber line (DSL), USB, FireWire,Ethernet or other wireline networking methods. Additionally oralternatively, the communication interface 216 can support communicationwith a device via a wireless connection, such as a Bluetooth connection,ZigBee connection, wireless USB connection, and/or the like.

The provisioning apparatus 106 can further include provisioning module218. The provisioning module 218 can be embodied as various means, suchas circuitry, hardware, a computer program product comprising computerreadable program instructions stored on a computer readable medium (forexample, the memory 214) and executed by a processing device (forexample, the processor 212), or some combination thereof. In someembodiments, the processor 212 (or the processing circuitry 210) caninclude, or otherwise control the provisioning module 218.

FIG. 3 illustrates a block diagram of an apparatus 300 that can beimplemented on a wireless communication device, such as the firstwireless communication device 102 and/or second wireless communicationdevice 104 in accordance with some example embodiments. It will beappreciated that the components, devices or elements illustrated in anddescribed with respect to FIG. 3 below may not be mandatory and thussome may be omitted in certain embodiments. Additionally, someembodiments can include further or different components, devices orelements beyond those illustrated in and described with respect to FIG.3.

In some example embodiments, the apparatus 300 can include processingcircuitry 310 that is configurable to perform actions in accordance withone or more example embodiments disclosed herein. In this regard, theprocessing circuitry 310 can be configured to perform and/or controlperformance of one or more functionalities of the apparatus 300 inaccordance with various example embodiments, and thus can provide meansfor performing functionalities of the apparatus 300 in accordance withvarious example embodiments. The processing circuitry 310 can beconfigured to perform data processing, application execution and/orother processing and management services according to one or moreexample embodiments.

In some embodiments, the apparatus 300 or a portion(s) or component(s)thereof, such as the processing circuitry 310, can include one or morechipsets, which can each include one or more chips. The processingcircuitry 310 and/or one or more further components of the apparatus 300can therefore, in some instances, be configured to implement anembodiment on a chipset. In some example embodiments in which one ormore components of the apparatus 300 are embodied as a chipset, thechipset can be capable of enabling a computing device to operate in awireless network, such as a cellular network.

In some example embodiments, the processing circuitry 310 can include aprocessor 312 and, in some embodiments, such as that illustrated in FIG.3, can further include memory 314. The processing circuitry 310 can bein communication with or otherwise control a communication interface 316and/or network access module 318. The processing circuitry 310 canfurther include or be in communication with network access credentialstorage 320.

The processor 312 can be embodied in a variety of forms. For example,the processor 312 can be embodied as various processing means such as amicroprocessor, a coprocessor, a controller or various other computingor processing devices including integrated circuits such as, forexample, an ASIC (application specific integrated circuit), an FPGA(field programmable gate array), some combination thereof, or the like.Although illustrated as a single processor, it will be appreciated thatthe processor 312 can comprise a plurality of processors. The pluralityof processors can be in operative communication with each other and canbe collectively configured to perform one or more functionalities of theapparatus 300 as described herein. In some example embodiments, theprocessor 312 can be configured to execute instructions that can bestored in the memory 314 or that can be otherwise accessible to theprocessor 312. As such, whether configured by hardware or by acombination of hardware and software, the processor 312 capable ofperforming operations according to various embodiments while configuredaccordingly.

In some example embodiments, the memory 314 can include one or morememory devices. Memory 314 can include fixed and/or removable memorydevices. In some embodiments, the memory 314 can provide anon-transitory computer-readable storage medium that can store computerprogram instructions that can be executed by the processor 312. In thisregard, the memory 314 can be configured to store information, data,applications, instructions and/or the like for enabling the apparatus300 to carry out various functions in accordance with one or moreexample embodiments. In some embodiments, the memory 314 can be incommunication with one or more of the processor 312, communicationinterface 316, network access module 318, or network access credentialstorage 320 via a bus(es) for passing information among components ofthe apparatus 300.

The apparatus 300 can further include communication interface 316. Thecommunication interface 316 can enable a wireless communication device,such as the first wireless communication device 102 and/or secondwireless communication device 104 to communicate with other devicesand/or networks. As such, the communication interface 216 can include,for example, a transceiver(s) and supporting hardware and/or softwarefor enabling communications with a wireless communication network (e.g.,a cellular network, WLAN, and/or the like) and/or a communication modemor other hardware/software for supporting communication via cable,digital subscriber line (DSL), USB, FireWire, Ethernet or other wirelinenetworking methods. Additionally or alternatively, the communicationinterface 216 can support communication with a device via a directwireless connection, such as a Bluetooth connection, ZigBee connection,wireless USB connection, and/or the like. As such, the communicationinterface 316 can be configured to enable a wireless communicationdevice to access the network 108 and/or otherwise interface with theprovisioning entity 106.

The apparatus 300 can further include network access module 318. Thenetwork access module 318 can be embodied as various means, such ascircuitry, hardware, a computer program product comprising computerreadable program instructions stored on a computer readable medium (forexample, the memory 314) and executed by a processing device (forexample, the processor 312), or some combination thereof. In someembodiments, the processor 312 (or the processing circuitry 310) caninclude, or otherwise control the network access module 318.

The network access credential storage 320 can provide memory for storageof a network access credential that can be provisioned by theprovisioning entity 106. In some example embodiments, the network accesscredential storage 320 can be implemented on memory 314, which canprovide memory space for network access credential storage.Alternatively, in some example embodiments, network access credentialstorage 320 can be implemented as dedicated hardware for network accesscredential storage. For example, in some such embodiments, networkaccess credential storage 320 can be SIM hardware (e.g., a SIM card). Insome example embodiments, network access credential storage 320 canprovide for secure storage of a network access credential.

The provisioning module 218 of some example embodiments can beconfigured to migrate a network access credential form the firstwireless communication device 102 to the second wireless communicationdevice 104. The migration procedure can be initiated in response to arequest that can be received by the provisioning entity 106. The requestcan be initiated by a network subscriber. For example, a wirelessnetwork subscriber can call a network operator or other service providerand/or visit a physical service provider location and request that hisor her account be migrated from the first wireless communication device102 to the second wireless communication device 104. The serviceprovider can in turn initiate a request to the provisioning entity 106to perform an account migration procedure. As another example, thesubscriber can use an application, web page form, or other form ofelectronic communication to request that the provisioning entity 106migrate his or her account from the first wireless communication device102 to the second wireless communication device 104.

The provisioning module 218 can respond to a request to migrate asubscriber account from the first wireless communication device 102 tothe second wireless communication device 104 by first deprovisioning thenetwork access credential associated with the account from the firstwireless communication device 102. Deprovisioning the network accesscredential from the first wireless communication device 102 can includeerasing the network access credential from the network access credentialstorage 320 or otherwise rendering the network access credentialunreadable by the first wireless communication device 102. Thus, forexample, if SIM hardware (e.g., a SIM card) is implemented on the firstwireless communication device 102, the network access credential can bedeprovisioned from the SIM hardware

In some example embodiments, the provisioning module 218 can beconfigured to cause the provisioning entity to send a deprovisioningcommand to the first wireless communication device 102 in order todeprovision the network access credential form the first wirelesscommunication device 102. In some such embodiments, the deprovisioningcommand can directly deprovision the network access credential from thefirst wireless communication device 102. For example, the deprovisioningcommand can be formatted in accordance with a device managementprotocol, such as by way of non-limiting example, Open Mobile Alliance(OMA) Device Management (DM) protocol or the like, which can enable theprovisioning entity 106 to directly manage network access credentials ona wireless communication device. Alternatively, in some exampleembodiments, the deprovisioning command can be a command that can berecognized by the first wireless communication device 102, and the firstwireless communication device 102 can erase the network accesscredential form the network access credential storage 320 in response tothe command

The provisioning module 218 can be further configured to determine(e.g., verify) that the network access credential has been successfullydeprovisioned from the first wireless communication device 102. Afterthe network access credential has been successfully deprovisioned fromthe first wireless communication device 102, the provisioning module 218can provision the network access credential to the second wirelesscommunication device 104. As such, by first successfully deprovisioningthe network access credential from the first wireless communicationdevice 102 prior to provisioning the network access credential to thesecond wireless communication device 104, the existence of instances ofthe network access credentials on multiple devices and the potential forcollisions can be avoided. Further, the first wireless communicationdevice 102 of some such example embodiments may not even attempt toconnect to the wireless network after being deprovisioned since it mayno longer have access to a readable network access credential foraccessing the network.

In provisioning the network access credential to the second wirelesscommunication device 104, the provisioning module 218 can provide thenetwork access credential to the second wireless communication device104 such that it is stored on a network access credential storage 320that can be implemented on the second wireless communication device 104.Thus, for example, if SIM hardware (e.g., a SIM card) is implemented onthe second wireless communication device 104, the network accesscredential can be provisioned to the SIM hardware.

In some example embodiments, deprovisioning of the network accesscredential from the first wireless communication device 102 can beperformed via an over-the-air (OTA) interface with the first wirelesscommunication device 102. Additionally or alternatively, provisioning ofthe network access credential to the second wireless communicationdevice 104 can be performed via an over-the-air (OTA) interface with thesecond wireless communication device 104. In this regard, for example,in embodiments in which the first wireless communication device 102and/or second wireless communication device 104 are connected to thewireless network which the network access credential is used to accessduring the migration procedure, OTA management techniques can be usedfor deprovisioning the first wireless communication device 102 and/orprovisioning the second wireless communication device 104. By way ofnon-limiting example, deprovisioning and/or provisioning can beperformed using OMADM, OTASP, Bearer Independent Protocol (BIP), and/orother protocols that can be used for OTA provisioning.

FIG. 4 illustrates a flowchart according to an example method fornetwork access credential migration according to some exampleembodiments. In this regard, FIG. 4 illustrates operations that can beperformed by the provisioning entity 106. Operation 400 can includedeprovisioning a network access credential from the first wirelesscommunication device 102. Operation 410 can include determining that thenetwork access credential has been successfully deprovisioned from thefirst wireless communication device 102. Operation 420 can includeprovisioning the network access credential to the second wirelesscommunication device 104 after the network access credential has beensuccessfully deprovisioned from the first wireless communication device102. One or more of processing circuitry 210, processor 212, memory 214,communication interface 216, or provisioning module 218 can, forexample, provide means for performing operations 400-420.

FIG. 5 illustrates a flowchart according to another example method fornetwork access credential migration according to some exampleembodiments. As illustrated by operation 500, a wireless networksubscriber can decide to change to a different wireless communicationdevice. At operation 510, the subscriber can initiate a request tomigrate his or her network account from the first wireless communicationdevice 102 to the second wireless communication device 104. In responseto the subscriber's request, an indication can be provided to theprovisioning entity 106 that the subscriber's account is to be migratedfrom the first wireless communication device 102 to the second wirelesscommunication device 104, at operation 520. Operation 530 can includethe provisioning entity 106 deprovisioning the network access credentialform the first wireless communication device 530. At operation 540, theprovisioning entity 106 can verify that the first wireless communicationdevice 102 has been successfully deprovisioned. If it is determined atoperation 540 that the first wireless communication device 102 has notbeen successfully deprovisioned, the method can return to operation 530.If, however, it is determined at operation 540 that first wirelesscommunication device 102 has been successfully deprovisioned, the methodcan proceed to operation 550, which can include the provisioning entity106 provisioning the network access credential to the second wirelesscommunication device 104. One or more of processing circuitry 210,processor 212, memory 214, communication interface 216, or provisioningmodule 218 can, for example, provide means for performing operations530-550.

In some example embodiments, the provisioning module 218 can be furtherconfigured to provision the first wireless communication device 102 witha predefined credential after the network access credential has beensuccessfully deprovisioned from the first wireless communication device102. The predefined credential can be a credential that is recognizableby the network access module 318 and that configures the first wirelesscommunication device 102 to not attempt connection to the wirelessnetwork that the network access credential is used to access. Thus, forexample, in embodiments in which the network access credentialdeprovisioned from the first wireless communication device 102 is anaccess credential for a cellular network, the predefined credential canconfigure the first wireless communication device 102 to not attemptregistration to, or otherwise attempt connection to the cellularnetwork. However, the first wireless communication device 102 can stillbe used for other purposes when provisioned with the predefinedcredential. For example, the wireless communication device 102 of somesuch example embodiments can still connect to a second wireless network,such as by way of non-limiting example, a WLAN, when provisioned withthe predefined credential.

The predefined credential can be any credential that can be provisionedin place of the deprovisioned network access credential that can berecognized by the network access module 318 to configure the firstwireless communication device 102 to bar connection to the wirelessnetwork associated with the deprovisioned network access credential. Forexample, in some example embodiments in which the deprovisioned networkaccess credential is used to access a cellular network and thepredefined credential bars connection to the cellular network, thepredefined credential can be one of a predefined IMSI or a predefinedIMSI prefix. The predefined credential can be different from a factorydefault credential that can be implemented on the first wirelesscommunication device 102 by a manufacturer, network operator, and/orother entity when the first wireless communication device 102 is in apre-provisioned state prior to purchase and activation.

In some example embodiments, the default credential can be provisionedto the first wireless communication device 102 via an OTA interface. Inthis regard, for example, OTA management techniques can be used forprovisioning the default credential. By way of non-limiting example,provisioning of the default credential can be performed using OMADM,OTASP, BIP, and/or other protocols that can be used for OTAprovisioning.

FIG. 6 illustrates a flowchart according to a further example method fornetwork access credential migration according to some exampleembodiments. In this regard, FIG. 6 illustrates operations that can beperformed by the provisioning entity 106. Operation 600 can includedeprovisioning a network access credential from the first wirelesscommunication device 102. Operation 610 can include determining that thenetwork access credential has been successfully deprovisioned from thefirst wireless communication device 102. Operation 620 can includeprovisioning a predefined credential to the first wireless communicationdevice 102. The predefined credential can configure the first wirelesscommunication device 102 to not attempt to connect to the wirelessnetwork which the deprovisioned network access credential is used toaccess. Operation 630 can include provisioning the network accesscredential to the second wireless communication device 104 after thenetwork access credential has been successfully deprovisioned from thefirst wireless communication device 102. It will be appreciated that theordering of operation 620 and 630 can be reversed in some embodiments.Additionally or alternatively, operations 620 and 630 can be performedat least partially concurrently in some example embodiments. One or moreof processing circuitry 210, processor 212, memory 214, communicationinterface 216, or provisioning module 218 can, for example, providemeans for performing operations 600-630.

FIG. 7 illustrates a flowchart according to an example method forenabling continued use of a wireless communication device followingdeprovisioning of the wireless communication device according to someexample embodiments. In this regard, FIG. 7 illustrates operations thatcan be performed by the first wireless communication device 102.Operation 700 can include receiving a deprovisioning command sent by theprovisioning entity 106 for deprovisioning a network access credentialfor a wireless network. The network access credential can bedeprovisioned from the first wireless communication device 102 based atleast in part on the deprovisioning command. Operation 710 can includereceiving a predefined credential provisioned by the provisioning entityafter the network access credential has been deprovisioned from thefirst wireless communication device 102. One or more of processingcircuitry 310, processor 312, memory 314, communication interface 316,network access module 318, or network access credential storage 320 can,for example, provide means for performing operations 700 and 710.Operation 720 can include recognizing the predefined credential. One ormore of processing circuitry 310, processor 312, memory 314, networkaccess module 318, or network access credential storage 320 can, forexample, provide means for performing operation 720. Operation 730 caninclude barring connection to the wireless network which thedeprovisioned network access credential is used to access in response tothe predefined credential. One or more of processing circuitry 310,processor 312, memory 314, communication interface 316, network accessmodule 318, or network access credential storage 320 can, for example,provide means for performing operation 730.

The various aspects, embodiments, implementations or features of thedescribed embodiments can be used separately or in any combination.Various aspects of the described embodiments can be implemented bysoftware, hardware or a combination of hardware and software. Thedescribed embodiments can also be embodied as computer readable code ona computer readable medium for controlling manufacturing operations oras computer readable code on a computer readable medium for controllinga manufacturing line. The computer readable medium is any data storagedevice that can store data which can thereafter be read by a computersystem. Examples of the computer readable medium include read-onlymemory, random-access memory, CD-ROMs, HDDs, DVDs, magnetic tape, andoptical data storage devices. The computer readable medium can also bedistributed over network-coupled computer systems so that the computerreadable code is stored and executed in a distributed fashion.

The foregoing description, for purposes of explanation, used specificnomenclature to provide a thorough understanding of the describedembodiments. However, it will be apparent to one skilled in the art thatthe specific details are not required in order to practice the describedembodiments. Thus, the foregoing descriptions of specific embodimentsare presented for purposes of illustration and description. They are notintended to be exhaustive or to limit the described embodiments to theprecise forms disclosed. It will be apparent to one of ordinary skill inthe art that many modifications and variations are possible in view ofthe above teachings.

What is claimed is:
 1. A method for migrating a network accesscredential for a wireless network from a first wireless communicationdevice to a second wireless communication device, the method comprising:deprovisioning the network access credential from a subscriber identitymodule (SIM) of the first wireless communication device; determining, bya processor, that the network access credential has been successfullydeprovisioned from the SIM of the first wireless communication device;and provisioning the network access credential to a SIM of the secondwireless communication device after the network access credential hasbeen successfully deprovisioned from the SIM of the first wirelesscommunication device, such that the network access credential isunavailable for use at the first wireless communication device beforethe network access credential is provisioned to the second wirelesscommunication device.
 2. The method of claim 1, wherein deprovisioningthe network access credential from the SIM of the first wirelesscommunication device comprises rendering the network access credentialunreadable by the first wireless communication device.
 3. The method ofclaim 1, wherein: deprovisioning the network access credential comprisesdeprovisioning the network access credential from the SIM of the firstwireless communication device via an over-the-air (OTA) interface withthe first wireless communication device; and provisioning the networkaccess credential comprises provisioning the network access credentialto the SIM of the second wireless communication device via an OTAinterface with the second wireless communication device.
 4. The methodof claim 1, further comprising receiving, at a provisioning entity, arequest to migrate the network access credential from the first wirelesscommunication device to the second wireless communication device,wherein deprovisioning the network access credential from the SIM of thefirst wireless communication device and provisioning the network accesscredential to the SIM of the second wireless communication device areperformed by the provisioning entity in response to the request.
 5. Themethod of claim 4, wherein the provisioning entity comprises one or moreof an Over-the-Air Service Provisioning (OTASP) entity, an Over-the-AirParameter Administration (OTAPA) entity, or an Over-the-Air (OTA)Subscriber Identity Module (SIM) provisioning entity.
 6. The method ofclaim 1, wherein the wireless network comprises a cellular network. 7.The method of claim 6, further comprising provisioning the firstwireless communication device with a predefined credential thatconfigures the first wireless communication device to not attempt toconnect to the cellular network after the network access credential hasbeen deprovisioned from the SIM of the first wireless communicationdevice.
 8. The method of claim 1, wherein the network access credentialcomprises one or more of an International Mobile Subscriber Identity(IMSI), a Mobile Subscription Identification Number (MSIN), a MobileIdentification Number (MIN), a Mobile Directory Number (MDN), a networkauthentication key, a Subscriber Identity Module (SIM) application, or aUniversal Subscriber Identity Module (USIM) application.
 9. An apparatusthat is associated with a provisioning entity, and comprising processingcircuitry configured to cause the apparatus to: receive a request tomigrate a network access credential for a wireless network from a firstwireless communication device to a second wireless communication device;and in response to receiving the request to migrate the network accesscredential: deprovision the network access credential from the firstwireless communication device; determine that the network accesscredential has been successfully deprovisioned from the first wirelesscommunication device; and provision the network access credential to thesecond wireless communication device after the network access credentialhas been successfully deprovisioned from the first wirelesscommunication device, such that the network access credential ismigrated from the first wireless communication device to the secondwireless communication device, wherein the network access credential isunavailable for use at the first wireless communication device beforethe network access credential is provisioned to the second wirelesscommunication device.
 10. The apparatus of claim 9, wherein theprocessing circuitry is further configured to cause the apparatus todeprovision the network access credential from the first wirelesscommunication device at least in part by rendering the network accesscredential unreadable by the first wireless communication device. 11.The apparatus of claim 9, wherein the processing circuitry is furtherconfigured to cause the apparatus to: deprovision the network accesscredential from the first wireless communication device at least in partby deprovisioning the network access credential via an over-the-air(OTA) interface with the first wireless communication device; andprovision the network access credential at least in part by provisioningthe network access credential to the second wireless communicationdevice via an OTA interface with the second wireless communicationdevice.
 12. The apparatus of claim 9, wherein the processing circuitryis further configured to cause the apparatus to provision the firstwireless communication device with a predefined credential thatconfigures the first wireless communication device to not attempt toconnect to the wireless network after the network access credential hasbeen deprovisioned from the first wireless communication device.
 13. Theapparatus of claim 9, wherein the wireless network comprises a cellularnetwork.
 14. A non-transitory computer-readable storage medium storingexecutable instructions that, when executed by one or more processors,causes an apparatus to: deprovision a network access credential for awireless network from a first wireless communication device; provisionthe first wireless communication device with a predefined credentialthat configures the first wireless communication device to not attemptto connect to the cellular network after the network access credentialhas been deprovisioned from the first wireless communication device;determine that the network access credential has been successfullydeprovisioned from the first wireless communication device; andprovision the network access credential to a second wirelesscommunication device after the network access credential has beensuccessfully deprovisioned from the first wireless communication deviceso that the network access credential is migrated from the firstwireless communication device to the second wireless communicationdevice wherein the network access credential is unavailable for use atthe first wireless communication device before the network accesscredential is provisioned to the second wireless communication device.15. The non-transitory computer-readable storage medium of claim 14,wherein the deprovisioning the network access credential from the firstwireless communication device further comprises rendering the networkaccess credential unreadable by the first wireless communication device.16. A wireless communication device comprising: at least one transceiverconfigurable to communicate data via a cellular network; and processingcircuitry coupled to the at least one transceiver, wherein theprocessing circuitry is configured to cause the wireless communicationdevice to: receive a deprovisioning command from a provisioning entityfor migrating a network access credential for the cellular network fromthe wireless communication device to a second wireless communicationdevice; deprovision the network access credential from the wirelesscommunication device based at least in part on the deprovisioningcommand, such that the network access credential is unavailable for useat the wireless communication device after the deprovisioning; receive apredefined credential from the provisioning entity after the networkaccess credential has been deprovisioned from the wireless communicationdevice; recognize the predefined credential; in response to recognizingthe predefined credential, prevent the wireless communication devicefrom connecting to the cellular network; and communicate via a wirelesslocal area network (WLAN) after the wireless communication devicerecognizes the predefined credential.
 17. The wireless communicationdevice of claim 16, wherein the predefined credential comprises one of apredefined International Mobile Subscriber Identity (IMSI) or apredefined IMSI prefix.
 18. The wireless communication device of claim16, wherein the processing circuitry is further configured to cause thewireless communication device to receive the deprovisioning command andthe predefined credential via an over-the-air (OTA) interface with thewireless communication device.
 19. The wireless communication device ofclaim 16, wherein the provisioning entity comprises one or more of anOver-the-Air Service Provisioning (OTASP) entity, an Over-the-AirParameter Administration (OTAPA) entity, or an Over-the-Air (OTA)Subscriber Identity Module (SIM) provisioning entity.